General
-
Target
5054bfd0d0bff74fe933cd9510be5a6d1b0ea13e872d2dbaa3bdfaea4fedb6a1.exe
-
Size
707KB
-
MD5
628f5b2f1d8e084807173795e0f5fe49
-
SHA1
fd8f278c21c8208029e22d2eaaf90b85f19ebfdf
-
SHA256
5054bfd0d0bff74fe933cd9510be5a6d1b0ea13e872d2dbaa3bdfaea4fedb6a1
-
SHA512
c46e48ad50d1ff22926a0938b015a8cb719da66341e198673d631242049f73a5dc0bc877a2b2211e9cd94e968d4dae3f8ce599bccdc7bca9433001f149810edb
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1P8tvnh:6uaTmkZJ+naie5OTamgEoKxLWmZh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
5054bfd0d0bff74fe933cd9510be5a6d1b0ea13e872d2dbaa3bdfaea4fedb6a1.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections